| CVE-2026-112816 |
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15,…
|
10.0
Critical
|
Oct 30, 2026 |
| CVE-2026-87799 |
Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10,…
|
9.9
Critical
|
Sep 28, 2026 |
| CVE-2026-85185 |
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8…
|
9.6
Critical
|
Sep 28, 2026 |
| CVE-2026-85526 |
Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with…
|
9.9
Critical
|
Sep 28, 2026 |
| CVE-2026-66897 |
A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions,…
|
9.9
Critical
|
Aug 24, 2026 |
| CVE-2026-48769 |
Incus has an arbitrary file write on its client due to trusted image hash
|
9.9
Critical
|
Aug 21, 2026 |
| CVE-2026-48755 |
Incus has an argument injection in backup compression algorithm leading to AFW and ACE
|
9.9
Critical
|
Aug 21, 2026 |
| CVE-2026-48752 |
Incus has arbitrary file read+write on host via templates/ symlink in malicious image
|
9.9
Critical
|
Aug 21, 2026 |
| CVE-2026-48751 |
Incus has a restricted project bypass leading to arbitrary command execution
|
9.9
Critical
|
Aug 21, 2026 |
| CVE-2026-48750 |
Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
|
9.9
Critical
|
Aug 21, 2026 |
| CVE-2026-48749 |
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
|
9.9
Critical
|
Aug 21, 2026 |
| CVE-2026-66898 |
A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and…
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-63293 |
A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host…
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-63294 |
A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-63296 |
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions…
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-63297 |
An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated…
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-62420 |
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security…
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-63300 |
An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an…
|
9.9
Critical
|
Aug 12, 2026 |
| CVE-2026-34179 |
In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate…
|
9.1
Critical
|
Apr 9, 2026 |
| CVE-2026-34178 |
In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the…
|
9.1
Critical
|
Apr 9, 2026 |
| CVE-2026-34177 |
Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden…
|
9.1
Critical
|
Apr 9, 2026 |
| CVE-2026-28384 |
An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged…
|
9.4
Critical
|
Mar 12, 2026 |